switch to https, fix login